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We provide a construction of sets of ci/2 + 1 mutually unbiased bases (MUBs) in dimensions 
d = 4, 8 using maximal commuting classes of Pauli operators. We show that these incomplete sets 
cannot be extended further using the operators of the Pauli group. However, specific examples of 
sets of MUBs obtained using our construction are shown to be strongly unextendible; that is, there 
does not exist another vector that is unbiased with respect to the elements in the set. We conjecture 
the existence of such unextendible sets in higher dimensions d = 2"(n > 3) as well. 

Furthermore, we note an interesting connection between these unextendible sets and state- 
independent proofs of the Kochen-Specker Theorem for two-qubit systems. Our construction also 
leads to a proof of the tightness of a H2 entropic uncertainty relation for any set of three MUBs 
constructed from Pauli classes in d = 4. 



I. INTRODUCTION 

Two orthonormal bases A = {\ai),i = 1, . . . ,d} and 
B = {\bj),j = of the d-dimensional Hilbcrt 

space C are said to be mutually unbiased if for every 
pair of basis vectors \ai) £ A and \bj) £ B, 



(1) 



Two bases A and B that arc mutually unbiased have 
the property that if a physical system is prepared in an 
eigenstate of basis A and measured in basis B, all out- 
comes are equally probable. A set of orthonormal bases 
{Bi,B2, . ■ . ,B,n} in is called a set of mutually un- 
biased bases (MUBs) if every pair of bases in the set 
is mutually unbiased. MUBs play an important role in 
our understanding of complementarity in quantum me- 
chanics and are central to several key quantum informa- 
tion processing tasks including quantum cryptography 
and state tomography. 

MUBs form a minimal and optimal set of orthogonal 
measurements for quantum state tomography [l], [J. To 
specify a general density matrix p G C^, which is Hcr- 
mitian and has Tr(p) = 1, one needs d? — 1 real pa- 
rameters. Since measurements within a particular basis 
set can yield only d — 1 independent probabilities, one 
needs d + \ distinct basis sets to provide the required 
total number of — 1 independent probabilities. Corre- 
spondingly, the maximal number of MUBs that can exist 
in d-dimensional Hilbert space is d -I- 1 and explicit con- 
structions of such maximal sets are known when d is a 
prime power 043- However, in composite dimensions 



while smaller sets of MUBs have been constructed d, @ , 
the question as to whether a complete set of MUBs exists 
in non-prime-power dimensions still remains unresolved. 

MUBs also play an important role in quantum cryp- 
tographic protocols, since they correspond to measure- 
ment bases that are most 'incompatible', as quantified 
by uncertainty relations. A set of measurement bases is 
said to be maximally incompatible if they satisfy a max- 
imally strong uncertainty relation. Being mutually un- 
biased is a necessary condition for a set of measurement 
bases to be maximally incompatible The security of 
cryptographic tasks such as quantum key distribution 8| 
and two-party protocols using the noisy-storage model 9| 
relies on this property of MUBs. In particular, proto- 
cols based on higher-dimensional quantum systems with 
larger numbers of unbiased basis sets can have certain ad- 
vantages over those based on qubits [l^, [HI ■ It is there- 
fore important for cryptographic applications to find sets 
of MUBs that satisfy strong uncertainty relations. 

Related to the question of finding complete sets of 
MUBs is the important concept of unextendible MUBs. 
A set of MUBs {Si, S2, . . . , Bm} in is said to be un- 
extendible if there does not exist another basis in that 
is unbiased with respect to all the bases Bj,j = 1, . . . , m. 
In this paper we show the existence of unextendible sets 
of MUBs even in systems for which a complete set of 
MUBs is known to exist. 

We follow a standard construction of MUBs based on 
finding mutually disjoint, maximal commuting classes of 
tensor products of Pauli operators It is always pos- 

sible to find a partitioning of the n-qubit Pauli operators 
in d = 2" into d+1 disjoint maximal commuting classes. 
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the common eigenbases of which form a complete set of 
d+1 MUBs Here, we show that there exist smaller 

sets of fc < d + 1 commuting classes {Ci,C2, . . . ,Ck} in 
d = 4, 8 that are unextendible in the following sense — no 
more maximal commuting classes can be formed out of 
the remaining n-qubit Pauli operators that are not con- 
tained in Ci UC2 . . . UCfc. The eigenbases of {Ci, . . . ,Ck} 
thus give rise to a set of k MUBs which cannot be ex- 
tended using joint eigenvectors of maximal sets of com- 
muting Paulis. We call such sets weakly unextendible. 

We also obtain examples of strongly unextendible sets 
of MUBs using our construction of unextendible classes in 
d = 4,8, that is, there does not exist even a single vector 
unbiased with respect to the bases in these sets. For two- 
qubit systems, our construction of unextendible sets of 
maximal commuting Pauli classes enables us to prove the 
tightness of an entropic uncertainty relation. Further- 
more, we also demonstrate an interesting connection be- 
tween unextendible sets of classes and state-independent 
proofs of the Kochcn-Speckcr Theorem [l2l.[l3|. 

The rest of the paper is organized as follows. We 
formally define weak and strong unextendibility in Sec- 
tion [n] and review the standard construction of MUBs 
from maximal Pauli classes. In Section Hill wc state our 
main results on constructing unextendible Pauli classes 
in d = 4, 8, detailed proofs of which are given in the 
Appendix (Sections El [B]). In Section |lVl we present ex- 
amples of sets of MUBs obtained using our construction 
that are in fact strongly unextendible. Finally, we dis- 
cuss properties and potential applications of such unex- 
tendible sets in Section IVl 



II. PRELIMINARIES 

A. Construction of MUBs from Maximal 
Commuting Operator Classes 

Let 5 be a set of d^ mutually orthogonal [l^ unitary 
operators in C*. This set of operators (including the 
identity operator I) constitutes a basis for the space of 
d X d complex matrices. To construct MUBs, we first 
partition the set iS\ {1} into classes of commuting opera- 
tors, with each class containing at most (d— 1) mutually 
orthogonal commuting unitary matrices. 

Definition 1 (Maximal Commuting Operator 
Classes). A set of subsets {Ci,C2, . . . ,Cl\Cj <Z S \ {I}} 
of size \Cj\ = d — 1 constitutes a partitioning of S \ {1} 
into mutually disjoint maximal commuting classes if the 
subsets Cj are such that (a) the elements of Cj commute 
for alll< j < L and (b) Cj n Cfc = for all j ^ k. 

In the rest of the paper, we often use the term operator 
classes to refer to such mutual disjoint maximal commut- 
ing classes. In particular, we use the term Pauli classes 
to refer to mutual disjoint maximal commuting classes 
formed out of the n-qubit Pauli group P„. 



The correspondence between maximal commuting op- 
erator classes and MUBs is stated in the following 
Lemma, originally proved in 0] . 

Lemma 1. The common eigenbases of L mutually dis- 
joint maximal commuting operator classes form a set of 
L mutually unbiased bases. 



B. Unextendibility of MUBs and Operator Classes 

Definition 2 (Unextendible Sets of MUBs). A set 

of L MUBs {Bi,B2, . . . ,13l} is unextendible if there does 
not exist another basis that is unbiased with respect to the 
bases Bi, . . . , Bl- 

For example, it is known that in dimension d = 6, 
the eigenbases of X,Z and XZ are an unextendible set 
of three MUBs Q, where X and Z are the generators 
of the Weyl-Hiesenberg group. This has the important 
consequence that starting with the Weyl-Hiescnbcrg gen- 
erators we cannot hope to obtain a complete set of seven 
MUBs in d = 6. Similarly, it has been shown that the 
set of three MUBs in d = 4 constructed using Mutually 
Orthogonal Latin Squares Q are also unextendible 14 j . 

A stronger notion of unextendibility can be defined as 
follows. 



Definition 3 (Strongly Unextendible Sets). A set 

of L MUBs {Bl, B2, . ■ . , Bl} in is said to be strongly 
unextendible if there does not exist any vector u e 
that is unbiased with respect to the bases Bi, . . . , Bl. 

The eigenbases oi X, Z and XZ in d ^ Q are known 
to be strongly unextendible Q. It is further conjectured 
that the set of three MUBs obtained as eigenbases oiX, Z 
and XZ are strongly unextendible in any even dimension 
(d = 2m), a conjecture that has been verified for d < 
12 [H. 

The correspondence between MUBs and maximal com- 
muting operator classes gives rise to a weaker notion 
of unextendibility, based on unextendible sets of such 
classes. 

Definition 4 (Unextendible Sets of Operator 
Classes). A set of L mutually disjoint maximal com- 
muting classes {Ci,C2, . . . ,Cl} of operators drawn from 
a unitary basis S is said to be unextendible if no other 
maximal class can be formed out of the remaining opera- 
tors m S \ {{1} U\jf^^C^). 

The eigenbases of such an unextendible set of classes 
form a weakly unextendible set of MUBs, as defined be- 
low. 

Definition 5 (Weakly Unextendible Sets of 
MUBs). Given a set of L MUBs {Si, 62, . . .,Bl} that 
are realized as common eigenbases of a set of L op- 
erator classes comprising operators from S. The set 
{Bi,B2, ■ . . ,Bl} is weakly unextendible if there does not 
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exist another unbiased basis that can be realized as the 
common eigenbasis of a maximal commuting class of op- 
erators in S. 

For example, consider the following three Pauli classes 
in d = 4. 

Ci {Y(g)Y,I(g)Y,Y(g>I}, 

C2 = {Y(g)Z,Z(g)X,X(g)Y}, 

C3 = {X(g)I,I(g)Z,X(g)Z} (2) 

Here, X, Y, Z denote the standard single-qubit Pauli op- 
erators. The partitioning above makes use of only nine 
of the fifteen two-qubit Pauli operators that constitute 
the set 7^2 \ {1} in d = 4. It is easy to check by hand that 
it is not possible to find one more set of 3 commuting 
operators from the remaining set 

{I®X,X®X,Y®X,Z®I,Z(^Y,Z®Z} 

of six Pauli operators. The set of three classes in ([2]) 
is thus unextendible, and their common eigenbases are 
therefore a set of weakly unextendible MUBs. We note 
that this set of MUBs was obtained earlier [l^ via a 
construction of smaller sets of MUBs in dimension d = 2" 
using the generators of the Clifford algebra. This set 
was observed to have interesting properties, in particular, 
saturating an entropic uncertainty relation (EUR) for the 
H2 entropy. Here, we explicitly prove the tightness of the 
EUR using our construction of unextendible classes (see 
Section Ell). 

III. CONSTRUCTION OF UNEXTENDIBLE 
PAULI CLASSES IN d = 4, 8 

In d = 2" dimensions, the set Vn \ {1} of all tensor 
products of Paulis contains a total of (4" — 1) operators. 
As observed earlier, there exists a partitioning of these 
(d^ — 1) operators in Vn \ {1} into a complete set of (d + 
1) mutually disjoint maximal commuting classes, with 
each class containing (d— 1) n-qubit Pauli operators. We 
begin by observing a few properties of such complete sets 
of Pauli classes which provide some intuition into our 
construction of unextendible Pauli classes. 

(PI) Each operator in Vn \ {1} commutes with (^ — 2) 
distinct operators, excluding itself and the identity 
operator. 

(P2) Each maximal commuting class is in fact an 
Abelian group generated by a set of n commut- 
ing operators. The remaining operators are simply 
products of these n generators. For example, in 
d = 4, each maximal commuting class is generated 
by two commuting Paulis. The third element of the 
class is simply the product of the two generators. 
Similarly, in d = 8, every maximal commuting class 
is generated by three commuting operators, say, Ui, 



U2, U3. Then, the non-trivial elements in the class 
are given by: 

{Ui, U2, t/3, U1U2, U1U3, U2U3, U1U2U3} 

(P3) Given any two maximal commuting classes, the re- 
maining d— 1 maximal commuting classes that con- 
stitute a complete set can be realized as products 
of the operators in these two classes. That is, given 
the d — 1 operators of Ci and the d — 1 operators in 
Cj £ [1, d-l- 1]), the remaining d — 1 classes can 
be obtained as products of these (d— 1)^ operators. 
This fact follows from the following Lemma. 

Lemma 2. The n generators of any two maximal com- 
muting classes that belong to a complete set of maximal 
commuting classes are independent of each other. 

Proof. Suppose that the n generators of a class Ci and the 
n generators of Cj {j 7^ i), are not independent of each 
other. This implies that at least one of the generators, 

(i) 

say aY G Cj, can be expressed as a product of some 

(i) 

generators ct/i G C^ and some of the remaining n — 1 

generators of Cj, that is, a[^^ = ctJ*' . . . Om 02'' . ■ . cr'f^. 
But this would mean that the non-trivial operator 
crJ^V^^'^ . . . a''/^ = erf ^ ...a^ri} belongs to both C, and Cj, 
which are in fact disjoint sets. Thus the n generators of 
any two classes must be independent of each other. Note 
however, that if we include a third class Ck, the genera- 
tors of Ck can be obtained as products of the generators 
ofCjandCj. □ 

(P4) Every operator in a given class Ci commutes with 
exactly n — 1 generators of any other class Cj {j 7^ 
i), and a total of 2"^^ — 1 operators in the class 
Cj . If an operator of Ci were to commute with all 
n generators of Cj, it would give rise to a set of 
n-\-l independent commuting operators, leading to 
a total of 2"+^ — 1 commuting operators. Such a 
set cannot exist in d = 2" since the cardinality of 
a maximal commuting set is 2" — 1. 

(P5) No two elements of Ci can commute with the same 
set of 2"~^ — 1 operators in a different class Cj 
{j i). This is formally stated and proven in the 
following Lemma. 

Lemma 3. Every operator Ui G Ci commutes with ex- 
actly 2"^^ — 1 elements in any other class Cj {j 7^ i). 
This set o/2"^^ — 1 operators is unique, that is, no two 
elements of Ci can commute with the same set of 2"^^ — 1 
operators in a different class Cj (j 7^ i). 

Proof. Suppose two operators Ui,Vi G Ci commute with 
the same set of 2"~^ — 1 operators in Cj (j 7^ i). This 
would imply that Ui , Vi commute with the same n — 1 
generators of Cj , thus leading to a total of n -I- 1 indepen- 
dent operators that all commute. These n -f 1 operators 
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will then generate a set of 2"+-'^ — 1 commuting opera- 
tors, but such a set cannot exist in dimension d = 2". 
Thus, no two operators of a class Ci can commute with 
the same set of 2"~^ — 1 operators in a different class Cj 

(Jt^O- □ 

A. Weakly Unextendible Sets of Three MUBs in 

d = 4 

Wc now state our central result on constructing weakly 
unextendible MUBs in d = 4, and give the proof in Sec- 
tion of the Appendix. 

Theorem 4. Given three classes Si, S2, S3 that belong 
to a complete set of classes in d = 4, there exists ex- 
actly one more maximal commuting class of operators S 
( distinct from Si, S2, S3) that can be formed using the 
operators in iSi U ^2 U ^3 . 

The class S along with the remaining two classes S4 
and 1S5 (in the complete set) form an unextendible set of 
classes, whose common eigenhases form a weakly unex- 
tendible set of three MUBs. 

For example, consider a complete partitioning of the 
two-qubit Paulis in 1^2 \ {1} as follows: 



Si 




5 




z} 


S2 


= {xa 




:>x,Xi 


?>X} 


S3 


= {xa 






E)X} 


Si 


= {Yd 


5 /,/« 


>Y,Y(g> 


Y} 


S5 


^ {Yd 


5 


E}X,X 


(g)Y} 



(3) 



The unextendible set in © is then constructed as follows: 
C3 is the unique Pauli class that can be formed using the 
operators in Si,S2,S3, whereas Ci and C2 are simply the 
remaining two classes 54 and 55. 

Theorem 2] not only proves the existence of unex- 
tendible sets of Pauli classes in d = 4, but provides a 
way to construct unextendible sets starting from any two 
maximal Pauli classes. 

Corollary 5. Given any two maximal commuting classes 
Ci and C2 in d = 4, there always exists a third class C3, 
of commuting operators such that the common eigenhases 
ofCi, C2, C'3 constitute a weakly unextendible set of three 
MUBs ind = A. 

Proof. To see this, we first note that any two disjoint 
Pauli classes Ci and C2 in d = 4 can be extended to a 
complete set of maximal commuting classes. Let, 

Ci={Ui,Vi,UiVi} and C2 = {C/2, F2, [/2F2}. 

Each element in Ci commutes with exactly one element 
in C2. Assume without loss of generality that [Ui, U2] = 
[Vi,V2] ~ [t^iVi, C/2V2] = 0. The remaining three classes 
are then given by 

C3 = {UlV2,U2Vi,UiViU2V2}, 

Ci = {UiU2,ViU2V2,UiViV2}, 

C5 = {UiViU2,UiU2V2,ViV2}. 



Commutativity within each class can be shown by direct 
calculation. 

Once we have the remaining three classes that form 
a complete set. Theorem 2] guarantees that wc can form 
exactly one more maximal commuting class using the re- 
maining three classes. Thus, if we construct C3 following 
Theorem |4l by picking one element each from each of 
these classes, we end up with three classes whose com- 
mon eigenhases are an unextendible set of three MUBs 
in d = 4. □ 

Finally, we show that using the two-qubit Pauli opera- 
tors, we cannot find any unextendible sets of four MUBs 
in d = 4. 

Theorem 6. Given two classes Ci and C2 that belong 
to a complete set of maximal commuting classes, there 
do not exist two more classes Cg and C4 such that the 
common eigenbases of Ci, C2, C'3, and C'^, constitute a 
weakly unextendible set of four MUBs in d = A. 

Proof. Let C3, C4 and C5 denote the remaining three 
classes of the complete set which are uniquely determined 
once Ci,C2 are given. Suppose there exist C3 and C4 as 
described above. Then, C'3 has to be constructed from 
the elements of C3, C4 and C5. Theorem |4] implies that 
one can construct exactly one more maximal commuting 
class using the elements of C3, Ci and C5. Let us denote 
this class by Cunoxt- Thus. C'3 is cither the same as Cunext, 
or it has to be one of C3, C4, or C5. In the former case, 
there cannot exist a C4 such that its common eigenbasis 
is unbiased with respect to the other three. In the latter 
case, we simply recover a complete set of five MUBs, thus 
showing that we cannot obtain a weakly unextendible set 
of four MUBs starting from two classes. □ 

Note that Theorem [6] is a special case of , where 
it is shown that any set of d MUBs in dimension d can 
always be extended to a complete set. 



B. Weakly Unextendible Sets of Five MUBs in 

d = 8 

We next demonstrate a construction of weakly unex- 
tendible sets of MUBs in d = 8. The basic construction 
idea is similar to that in d = 4, but proving that such 
a construction always leads to an unextendible set turns 
out to be more complex in this case. 

Theorem 7 (Five Weakly Unextendible MUBs in 

d = 8). Given five maximal commuting classes Ci,. . . , C5 
that belong to a complete set of classes in dimension d = 
8, there exists exactly one more maximal commuting class 
that can be constructed using the elements o/CiU. . .UC5. 
Denoting this new class asS, {CsjCr^CsjCgjS} is a set of 
five unextendible Pauli classes, the common eigenbases of 
which form a set of weakly unextendible MUBs in d ~ 8. 
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We know from Lemma [3] that the only way to form a 
set S of seven commuting operators out of Ci U . . . U C5 
is to pick three elements from one class (say Ci ) and one 
element each from the remaining four classes. Further- 
more, the three elements belonging to Ci must be of the 
form {Ui,Uj,UiUj} C Ci. We refer to the Appendix 
(Section [B]) for a proof of Theorem [71 

The following theorem shows that starting with k ^ 5 
classes out of a complete set, no other maximal commut- 
ing class can be formed using the operators in k such 
classes. 

Theorem 8. Given k maximal commuting classes Ci, 
Ci,. . . , Ck in dimension d = 8, it is not possible to con- 
struct another maximal commuting class using the ele- 
ments o/Ci U . . . U Cfe for fc 7^ 5. 

Once again we refer to Section [B] for the proof. 

Together Theorems [71 and [51 imply that is possible to 
construct a set of exactly five weakly unextendible MUBs 
using tensor products of Paulis in d = 8; no more, no 
fewer. 

C. Unextendible Sets in Higher Dimensions 

The existence of unextendible sets of classes in d = 4, 8 
relies entirely on properties (PI) through (P5) listed 
above, in particular. Lemma [3l Since these properties 
hold for all dimensions d = 2", our construction of un- 
extendible sets of classes should generalize to higher di- 
mensions d = 2" (n > 3) as well. However, we do not 
have a proof of such a general construction yet, so we 
will merely conjecture the existence of unextendible sets 
of d/2 + 1 MUBs here. 

Conjecture 1 {d/2 + 1 Unextendible MUBs in 
d — 2"). Given k ~ d/2 -\- 1 maximal commuting classes 
Ci, C2,. . . , Cdj^-^ that belong to a complete set of maxi- 
mal commuting classes in d — 2", there is exactly one 
more maximal commuting class S that can be formed 
using the operators 0/ Ci U . . . U Cd_^^. The set of 

classes {S,Cd^2T^i+3i ■ ■ ■ T^d+i} t-s an unextendible set 
ofd/2-\- \ classes whose common eigenbases form an un- 
extendible set of MUBs. 

IV. STRONGLY UNEXTENDIBLE SETS OF 
MUBS IN d = 4, 8 

In the following we present examples of sets of three 
and five MUBs in d = 4 and d = 8 respectively, ob- 
tained from our construction, that are in fact strongly 
unextendible. 

Consider the following two unextendible sets of Paulis 
in d = 4 and d = 8. 

Ci = {r® r,/(g)F,y® /} 

C2 = {Y(g)Z,X(g)X,Z(g)Y} 

C3 = {Z ® 1,1 ® Z,Z ^ Z} (4) 



Ci = {IIY,YYI,YYY,IYY,YII,IYI,YIY}, 

C2 = {IXI,XIX,XXXJXX,IIX,XII,XXI}, 

C3 = {ZIIJZZ,ZZZ,IIZJZI,ZIZ,ZZI}, 

Ci = {IZX,YZI,YIX,ZYY,XYZ,ZXZ,XXY}, 

C5 = {XIZ,XYI,IYZ,ZXX,YZX,YXY,ZZY}{h) 

Suppose there exists a normalized vector that is 
unbiased with respect to all joint eigenvectors of the given 
classes. Since one of the eigenbases in both sets is the 
computational basis we can assume that is of the 
form 

IV') = -^(1,2:1,..., Xrf-i)'^. (6) 

Denoting the joint eigenbasis of the class Ci by Bi = 
{|6'"'') : a = 1, . . . , d}, we get the following conditions on 
the vector 

mh't^)?-\^Q. (7) 

Note that ([7]) involves complex conjugation of the coeffi- 
cients Xj of the vector \ip). 

Unbiascdness with respect to the computational basis 
implies that the coefficients Xj in ^ must have modu- 
lus one, which implies that Xj = l/xj, where Xj denotes 
complex conjugation. Hence the left-hand side of ([7]) is a 
rational function in the d — 1 variables Xj . Equivalently, 
we can consider the system of polynomial equations ob- 
tained from the numerators of the left-hand side of ([T]) , 
provided that the denominator does not vanish. It turns 
out that the denominators are just products of the vari- 
ables Xj, so the additional condition requires that none 
of the variables Xj vanishes. 

Using the computer algebra system Magma [l^, we 
can compute a Grobner basis for the ideal generated by 
the numerators of the conditions ([7]). From the Grobner 
basis we can deduce that for both the sets in ([3]) (d = 
4) and (O (d = 8), at least two of the coefficients Xj 
must vanish, contradicting the assumption that \xj \ = 1. 
Hence, there does not exist a vector ji/') that is unbiased 
to all bases, and therefore the sets of three and five MUBS 
in (HI) (d = 4) and ([5]) (d = 8), respectively, are strongly 
unextendible. 



V. APPLICATIONS OF UNEXTENDIBLE SETS 

IN d = 4, 8 

Our construction of unextendible sets of classes in di- 
mensions where a complete set of such classes exist, offers 
new insight into the structure of MUBs in these dimen- 
sions. The complete set of MUBs in dimensions d = 2" 
has d -I- 1 bases, which are optimal for state tomogra- 
phy, whereas the unextendible sets we construct contain 
1 + 1 bases. We now discuss potential applications of 
such smaller sets of MUBs for quantum foundations and 
for cryptographic tasks. 
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A. State-independent Proofs of the 
Kochen-Specker Theorem 

Consider the set of three MUBs in d = 4 in ([2|) . There 
exists an alternate partitioning of the nine operators that 
constitute the set, leading to another set of three com- 
muting classes, namely, 

C[ = {Y®Y,Z®X,X®Z}, 

C'2 = {I(g)Y,X(g)Y,X(g)I}, 

C'3 = {Y(g)I,Y(g)ZJ(g)Z}. (8) 

The new classes C,[ arc formed by picking one commuting 
element each from each of Ci, C2, and C3. Each of the 
nine Pauli operators in ([5]) is a part of two maximal com- 
muting classes - Ci and . The partitions in ^ and ^ 
provide two separate contexts for each of these 9 Pauli 
operators, thus leading to a state-independent proof of 
the Kochen-Specker (KS) Theorem [T^ in c? = 4, similar 
to the proof by Mermin [Ij] . In fact the set of nine two- 
qubit Paulis used in Mermin's original proof also give rise 
to an unextendible set of three MUBs, via a partitioning 
into an unextendible set of classes. 

The existence of two such contexts for the same set of 
nine operators is a property unique to unextendible sets 
of classes in d = 4, as we will prove below. The existence 
of two such partitions of the same set of nine operators is 
not possible for an arbitrary triple of commuting classes 
that we may pick out of the complete set of five classes 
that exist in 0? = 4. 

Theorem 9. Given an unextendible set of three maximal 
commuting classes {Ci,C2,C3}, the nine operators that 
constitute these classes can be partitioned into a different 
set of three maximal commuting classes {C[,C2,C'^} such 
that CI has one operator each from each of Ci, C2, and 
Cz. 

Proof. Let us denote the unextendible set of three classes 
as 

Ci = {Ui,Vi,UiVi}, 

C2 = {U2,V2,U2V2}, 

C3 - {U^^V^MsVs} (9) 

If this set of three classes were in fact extendible, the 
operators in Ci and C2 must be distributed in such a way 
as to generate three more maximal commuting classes. 
But since these are unextendible classes, the products of 
the operators in Ci and C2 arc distributed such that they 
form only one maximal commuting class, namely, C3. Wc 
have already encountered such a distribution in proving 
Theorem m 

Let [Ui,U2] = = [^1,1^2], so that [C/i^i, [72^2] = 0. 
Suppose we set U3 = U1U2 and V3 = V1V2, so that 
U3V3 = UiU2ViV2- Then, as proved in TheoremlH the re- 
maining product operators U1V2, U2V1, U1U2V2, U2U1V1, 
V1U2V2, and V2U1V1 cannot be used to form a maximal 
commuting class. Any other assignment of commuting 



products to U3 and V3 will lead to a complete set of 
maximal commuting classes. Thus the class C3 for an 
unextendible set is of the form 

C3 = {U1U2, V1V2, U1U2V1V2}. (10) 

Therefore, there exist 3 other maximal commuting classes 
that can be formed using the operators in Ci, C2, and C3: 

C[ = {Ui,U2,UiU2}, 

C'2 = {Vi,V2,V,V2}, 

= {UiVi,U2V2,UiU2ViV2}. (11) 

□ 

Finally, we note that this property holds for the unex- 
tendible set in d = 8 given in ([S])- The operators consti- 
tuting this set have the property that they can be parti- 
tioned into another set of five Pauli classes, as follows: 

C[ = {IIY,YYI,YYY,XXI,ZZI,XXY,ZZY}, 

Ci 

C'2 = {IXI,XIX,XXX,ZIZ,ZXZ,YXY,YIY}, 
. ' 

C2 

Cg = {ZII,IZZ,ZZZ,ZYY,ZXX,IYY,IXX}, 

C3 

C4 = {IZX,YZI,YIX,YZX,YII,IIX,IZI}, 

C5 = {XIZ,XYI,IYZ,IYI,XII,IIZ,XYZ}. (12) 

^^^^ V 

These new classes C,' are obtained by picking three com- 
muting operators from the corresponding class Ci in ([S]) 
and one operator each from the remaining four classes 
Cj {j 7^ i). Thus, we have a set of operators in d = 8 
such that every operator is part of two different maxi- 
mal commuting classes. Whether this property holds in 
general for all unextendible sets in d = 8, and what role 
such sets play in proving violations of non-contextuality 
remains to be seen. 



B. Tightness of H2 Entropic Uncertainty Relation 

MUBs correspond to measurement bases that are most 
"incompatible" , where the degree of incompatibility is 
quantified by entropic uncertainty relations. An entropic 
uncertainty relation (EUR) for a set of L measurement 
bases {Bi, B2, ■ ■ ■ , Bl} provides a lower bound on the av- 
erage entropy H{Bj\\%p)): 

ij2H{B,m>CL, (13) 

for all states |?/'). Here, H{Bj\\ip)) denotes the entropy 
of the distribution obtained by measuring state \ip) € 
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S{'C'^) in the measurement basis Bi. Here we will focus 
on the collision entropy H2 of the distribution obtained 
by measuring state 1-0) in the measurement basis Bi = 
{\h^P),j = 1, . . . defined as, 

d 

i/2(S.||0)) = -log^(|(6P|^)|2f. (14) 

For L MUBs in d dimensions, the collision entropy sat- 
isfies the following uncertainty relation Q: 




However, it is not known if this EUR is tight in general. 
Here, we use the result of Theorem 2] to show that this 
uncertainty relation is in fact tight for any three MUBs 
in d = 4, whether they be (a) part of a complete set of 
MUBs, or (b) a set of weakly unextendible MUBs. We 
merely state the result here and refer to the Appendix 
(Section [C| for the proof. 

Theorem 10. Given a set of three maximal commut- 
ing classes {Ci,C2,C3} in dimension d ~ A such that at 
least one more maximal commuting class S can be con- 
structed by picking one element from each of Ci, C2, and 
C3 . Then, the common eigenstates of the operators in S 
saturate the following uncertainty relation: 

\Y^H2mm>^, (16) 

where Bi is the common eigenbasis of the operators in Ci . 

We note that such a property was observed earlier [l^ 
for the unextendible set in Here we generalize this 
and prove that this EUR is saturated by all sets for three 
MUBs in d = 4. 



VI. CONCLUSIONS AND OPEN QUESTIONS 

In this paper we have explored the question of whether 
there exist smaller, unextendible sets of mutually unbi- 



ased bases in dimensions d = 2". We have shown by ex- 
plicit construction the existence of sets of (i/2 ~f 1 MUBs 
in dimensions d = 4, 8 from Pauli classes, that are un- 
extendible using common eigenbases of operator classes 
from the Pauli group. Our construction is based on 
grouping the n-qubit Pauli operators into unextendible 
sets of d/2 -(- 1 maximal commuting classes. We have 
shown that specific examples of such unextendible Pauli 
classes in fact lead to strongly unextendible MUBs. 

Since our construction relies on general properties of a 
complete set of Pauli classes which hold for any d = 2", 
we are led to conjecture the existence of such unex- 
tendible classes in higher dimensions [n > 3) as well. 
Furthermore, since our construction essentially relies on 
partitioning a unitary operator basis into classes of com- 
muting operators, it has the potential to be generalized 
to the case of prime-power dimensions. 

In the case two-qubit systems we have pointed out 
an interesting connection between unextendible sets of 
Pauli classes and state-independent proofs of the Kochen- 
Specker Theorem. We have also shown that the tightness 
of the H2 entropic uncertainty relation for any set of three 
MUBs in d = 4 follows as an important consequence of 
our construction. 

We strongly suspect that the sets of weakly unex- 
tendible MUBs arising from our general construction in 
d = 4, 8 are in fact strongly unextendible. While we 
were able to prove this for specific examples presented 
in this paper, a general proof remains elusive. Further- 
more, while we conjecture the existence of unextendible 
sets of MUBs in dimensions d = 2". proving this remains 
an open problem. 
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Appendix A: Proof of TheoremBl 

Proof. Suppose the three classes arc of the form 
Si = {Ui,Vi,UiVi}, 

S3 = {U3,V3M3V3}. (Al) 

Each clement is Si commutes with one element from 
each of ^2 and ^3. Assume without loss of generality 
that [Ui,U2] - = [Ui,U3] and [Vi,V2] = = [1/1,1/3]. 
Note that Vi and Ui cannot both commute with the 
same element in S2 (or S3), for this would give a set of 
four commuting operators (for, e.g., {Ui, Vi, U2, UiVi}), 
which is not possible. This immediately implies that 
[UiVi,U2V2] = and [UiVi,U3V3] = 0. 
Uniqueness: We first show that it is not possible to con- 
struct more than one maximal commuting set from the 
operators in 5i U ^2 U ^3. Suppose U3 = U1U2 and 
1/3 = V1V2, so that there exist two maximal commut- 
ing sets: {Ui, U2, U1U2} and {1/1,1/2, V1V2}. The class ^3 
becomes 

53 = {U1U2, V1V2, U1U2V1V2}. (A2) 

Now, since both [U2,U3] — and [1^2,1/3] — 0, we see 
that U2V2 must commute with U3V3 = UiU2ViV2- Thus, 
the assumption that there exists more than one maximal 
commuting set implies that there exists a third maximal 
commuting set as well — {?7il/i, C/2V2, f/sVs}. We will 
show that this in fact leads to a contradiction. 

Similar to ^3, we can also obtain the remaining two 
classes ^4 and S5 as products of Ui, U2, Vi, V2, UiVi, 
U2V2. Consider U1V2 and U2V1. Note that 

[UiV2,U2Vi] = 0, 
and {UiV2){U2Vi) = U1U2V1V2 ^ U3V3. 

If U1V2, U2V1 were to belong to the same class, the oper- 
ator U3V3 would occur in two different classes. There- 
fore, let U1V2 G 54 and U2V1 € S^. Next, consider 



the products Ui{U2V2) and U2{UiVi). Since Ui{U2V2) = 
{UiV2)V2, and we have assumed U1V2 € ^4, this operator 
cannot belong to ^4. And, since 

{U2Vi){UiU2V2) = -U1V1V2, 
iUiU2V2)iU2Vi) = U1V1V2, 

[U2Vi,UiU2V2] + 0, (A3) 

Ui{U2V2) cannot belong to ^5 either. Similarly, the 
product U2{UiVi) cannot belong to ^4 or ^5. Thus, 
our assumption that there exist two maximal commut- 
ing classes in iSi U ^2 U ^3 leads to a situation where 
there are not enough commuting operators to form the 
remaining two classes 54 and S^ . 

On the other hand, suppose we had assumed U3 = 
U1V2 and V3 = U2V1, we would have exactly one maximal 
commuting class, namely, 

{UiVi, U2V2, U3V3 - U1U2V1V2} (A4) 

and sufficient number of commuting operators to form 
the remaining two classes: 

Si = {UiU2,ViU2V2,V2UiVi}, 
S, = {ViV2,UiU2V2,U2UiVi}. 

Existence: We next show that there has to exist at least 
one maximal commuting class (distinct from iSi, iS2, S3) 
that can be formed using the set {Ui, Vi, UiVi}f^i. Once 
again, let 54 and 55 denote the two remaining classes 
that form a complete set. Consider the elements U1V2 
and ViV2. These cannot belong to either Si or ^2, by 
construction. Suppose, UiU2,ViV2 ^ ^3 either. Further- 
more, U1U2 and V1V2 have to each belong to a different 
class, say 54 and 1S5 respectively. For, if they belonged 
to the same class, say ^4, we could form more than one 
maximal commuting class from the operators in Si, S2, 
S4, contradicting the uniqueness result above. 

Now, consider the operator UiViU2V2- This also can- 
not belong to the classes Si or 52, by construction. Fur- 
ther, note that, 

[{UlVi){U2V2),UiU2] 
= {UiU2){UiVi){U2V2) - {UiVi){U2V2){UiU2) 
= U2{ViV2)U2~Ui{ViV2)Ui 

Therefore U1V1U2V2 commutes with U1U2 iff Ui ~ U2- 
Similarly, we argue that it does not commute with V1V2 
either, implying that it cannot belong to the remaining 
two classes 54 and S^. Thus, U1V1U2V2 £ S3, leading to 
the existence of at least one maximal commuting class: 

{C/iyi,C/2l/2,C/lFiC/2l/2}. □ 

Appendix B: Five Unextendible Classes in d = 8 
1. Proof of Theorem [7| 

Theorem 11 (Five Weakly Unextendible MUBs in 

d — 8). Given five maximal commuting classes Ci,. . ., 
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Cs which are taken from a complete set of classes in di- 
mension d = 8, there exists exactly one more maximal 
commuting class that can be constructed using the ele- 
ments o/Ci U . . . UC5. Denoting this new class as S, the 
set {CejCj,Cs,CQ,S} is a set of 5 unextendihle MUBs in 
d = 8. 



Proof. Wc know from Lemma [3] that the only way to 
form a set S of seven commuting operators out of Ci U 
. . . U C5 is to pick three elements from one class (say Ci ) 
and one element each from the remaining four classes. 
Furthermore, the three elements belonging to Ci must be 
of the form {Ui, Uj, UiUj} C Ci. 

Existence: We first show that such a maximal commut- 
ing class S can always be found, given any five maximal 
commuting classes. Note that there are 7 such distinct 
triples that can formed using the elements of Ci. Once 
we pick three operators in Ci, there is a unique element 
V(y) € Ci that commutes with the first three. The re- 
maining operators in S will therefore have to be UiV(^ij^, 
UjV(^ij), and UiUjV(^ijy Our task is to show that at least 
one of the seven triples oi the ioim {Ui, Uj , UiUj} is such 
that the corresponding operators UiV(ij), UjVi^ij), and 
UiUjVt^ij) must belong to the classes C3, C4, and C5 re- 
spectively. This follows once we make the following ob- 
servations: 



(Tl) The three operators ?7iV(y), /7,V(y), and UiJJjVi^ij) 
should each belong to different class. Clearly, all 
three cannot belong to the same class, for that 
would imply that UiUj occurs in two different 
classes. No two of them can belong to the same 
class either, for the third is simply a product of the 
other two. 



(T2) Let us label the seven triples that can be formed 
using the elements of Ci as ti , T2 , . . . , T7 . Any 
two of them share exactly one common element, 
that is, \Ti n Tj l = 1 for i 7^ j. Consider two such 
triples of the form ti = {Ui,Uj,UiUj} and T2 = 
{Ui, Uk, UiUk}- Say V(y) G C2 is the unique opera- 
tor in C2 that commutes with ri , and V(^ik) S C2 the 
operator that commutes with T2. The triples ob- 
tained by multiplying with the corresponding com- 
muting elements in C2 are distributed among the 
remaining classes such that the operators UiV(^ij) 
and /7jV(ifc) belong to different classes. Thus, the 
elements of any two triples Ti and tj cannot be dis- 
tributed within three classes, but need four classes. 



In order to satisfy the above constraints, the operators 
obtained as products of the triples ti, T2, . . . , T7 with 
the corresponding commuting operators in C2, must be 



distributed as follows: 

rl Cg C7 Cs 

t2 —7- C7 Cs Cg 

t3 ^ C3 Cs Cg 

r4 ^ C3 C4 C5 

t5 — > C4 C5 Cg 

t6 — > C5 Cg C7 

t7 Cg C7 Cs (Bl) 

This completes our proof of the existence of at least 
one triple of operators {Ui,Uj,UiUj} G Ci and the cor- 
responding commuting operator V^y-) S C2, such that 
UiV(^ij) e C3, C/jV(,y) e C4, UiUjV^ij) e C5. Thus, we 
at least one maximal commuting class S as desired. 

Uniqueness: The distribution of triples in (jBip shows 
that there exists exactly one triple of the {Ui,Uj,UiUj} C 
Ci which can lead to a maximal commuting class S com- 
prising of elements from Ci U C2 U . . . U C5. The question 
remains as to whether we can find another maximal com- 
muting class S' starting with 2 generators from a class 
other than Ci. We will now argue that this is impos- 
sible using the fact that {Ci, . . . ,C5} is extendible to a 
complete set of 9 maximal commuting classes. 

We begin by noting that the complete set can be gener- 
ated starting with any two maximal commuting classes, 
say Ci and C2. Let {711,^2,^3} denote a set of genera- 
tors for Ci and {Bi,B2, B^} be a set of generators for C2. 
Each generator of C2 commutes with at most two gener- 
ators of Ci and vice- versa. Without loss of generality, let 
us assume 

[AuBs] = = [^2,^3] 
[A2,Bi] = = [As,Bi] 
[A3,B2] = = [Ai,B2] 

Then, the generators of the remaining classes can be 
denoted as: 



Ci = 


(^1,^2, A3) 




C2 = 


(_Bi, i?2, -B3) 




C3 = 


{AiBi,A2B2,A3B3) 


C4 = 


{AiB3,A2{B2B3) 


A3{BiB2)) 


C5 = 


{A1B2, A3{B2B3) 


A2{BiB2B3)) 


Cg = 


{A2B1, Ai{B2B3) 


AsiB.Ba)) 


C7 = 


{A2B3,AiiBiB3) 


A3iBiB2B3)) 


Cs = 


{A3Bi,A2iBiB2) 


Ai{BiB2B3)) 


Cg = 


{A3B2,A,iB,B2) 


AiiBiB^)) 



While this construction might appear rather specific, 
in fact any complete set of maximal commuting classes 
in d = 8 can be realized in this fashion. In other words, 
given any two classes Ci and C2 in d = 8, we can al- 
ways identify a set of generators {Ai,yl2, A3} C Ci and 
{Bl, B2, B^} C C2 that generate the rest of the classes as 
described above. 
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Within such a reahzation of the complete set of maxi- 
mal commuting classes, consider some set of five classes, 
for example, {Ci,C2,C4,Ct,Cs}- 

Ci = (Ai,A2,A3) 

C2 = {Bi, B2, B£) 

Ci = {A^,A2{B2B3),A3{BiB2)) 

Cj = {A2B3, AijBiB^), A3{BiB2B3)) (B2) 

Cs = {A3Bi,A2iBiB2),Ai{BiB2B3)) 3 {AiA2)B3 

As proved earlier, there exists a maximal commuting 
class S that can be formed out of the operators in these 
five classes. Following our construction, the class S is 
obtained by choosing the generators Ai,A2 € Ci and the 
commuting generator i?3 e C2: 

S = {Ai,A2,B3, A2B3,AiA2B3}. 

This explicit construction allows us to see that S is 
in fact the only maximal commuting class that can be 
constructed from these five classes. We have already 
seen that such a class cannot be formed by choosing two 
other generators from Ci. Starting with two generators 
Bi,B2 G C2 and the commuting generator A3 £ Ci, the 
resulting class has at least one operator A3B2 that is not 
contained in C4, C7 or Cs. 

Pairs of generators in the remaining classes are 
of three different types: (a) Suppose we choose 
{Ai{BiBj), Aj{BiBjBk)} to start with. The correspond- 
ing commuting operator in Ci is AiAj. Taking products, 
the resulting class has no operator which is only a prod- 
uct of the -B,;'s, and therefore no operator from C2. The 
resulting class therefore contains at least one operator 
that is outside of the given five classes, (b) Suppose we 
choose {Ai{BiBj), Aj{BiBk)}. The corresponding com- 
muting operator from Ci is AiAjAk, the resulting class 
therefore has no operator from C2 and cannot be formed 
using the operators in these five classes, (c) Choosing 
{AiBk, Aj(BjBi;)}, the corresponding commuting gener- 
ators are Ai g Ci and Bk G C2. But taking products, the 
operator AjBj is not contained in this set of five classes. 
We have thus shown that it is not possible to find two 
generators in C2, C4, C7, or Cs, such that, along with the 
commuting generator from Ci, they generate a different 
maximal commuting class within these five classes. 

Finally, we note than any set of five classes can be 
realized as described in Equation (|B2[) . once the gener- 
ators Ai,A2,A3 and i?i,_B2,i?3 are suitably identified. 
Our uniqueness argument is therefore completely gen- 
eral, and shows that there exists only one more maximal 
commuting class in any set of five classes in d = 8. □ 

2. Proof of Theorem [8] 

Theorem 12. Given k maximal commuting classes Ci, 
C2,. . . , Cfc in dimension d ^ 8, it is not possible to con- 
struct another maximal commuting class using the ele- 
ments o/Ci U . . . U Cfc for fc 7^ 5. 



Proof. (i) fc = 3: We first consider starting with Ci, 
C2, C3. Since not more than three elements in a 
given class can commute with a fixed element of a 
different class, there are only two ways to construct 
a maximal commuting class using the elements of 
Ci UC2UC3: 

(a) find 3 elements each from two of the classes 
(say Ci and C2) and one more element from C3 
that all commute, or 

(b) find 3 elements from Ci and 2 elements each 
from C2 and C3 that mutually commute. 

But we know from Lemma [3] that a given set of 
three operators in Ci cannot commute with more 
than one element from either C2 or C3. Thus, both 
constructions (a) and (b) are ruled out, and hence 
we cannot find a fourth maximal commuting class, 
given three maximal commuting classes. 

This preceding argument also rules out the case of 
fc = 2 classes, as we cannot chose more than three 
elements form a given class. 

(ii) fc = 4: Say we start with Ci,..., C4. In order 
to construct a maximal commuting set of 7 opera- 
tors form the elements of these four classes, we will 
again have to find two elements in one class that 
commute with three elements of a different class. 
This is not possible, as shown in Lemma |3l Thus, 
given four maximal commuting classes, we cannot 
form a fifth class using their elements. 

(iii) fc = 6: Given six maximal commuting classes in 
d ~ 8, the only way to construct another maximal 
commuting class is to pick one generator each from 
five of the classes (say Ci , . . . , C5 ) , and two elements 
from Cq. However, Lemma [3] implies that it is not 
possible to pick exactly two operators from a single 
class that commute with one operator in a different 
class, in c? = 8. The product of the two elements 
from Cg gives a third operator in Cg that also com- 
mutes with the other elements, thus exceeding the 
limit of seven commuting Paulis. 

(iv) fc = 7: Given seven maximal commuting classes in 
c? = 8, the only way to construct another maxi- 
mal commuting class is to find one element in each 
class such that all seven of them mutually com- 
mute. Note that given seven distinct elements, at 
least three of them must be independent. Assume 
that we pick three independent elements from the 
first three classes, i.e., Ai G Ci, Bi S C2, and 
Ci € C3, Then the rest of the new maximal com- 
muting class S is given by the products of these 
three operators, that is, we have 

5 = { Ai , Si , Ci , Ai Si , Ai Ci , Si Ci , Bi Ci } . 

Now, suppose AiBi e C4. According to 
Lemma [3J corresponding to each clement in 
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S, there exist commuting triples of the form 
{AiBi,Di,{AiBi)Di} e C4. Since C4 has only 
three independent generators — AiBi, Di, and D2 
— there exist only three such triples, namely: 

T2 = {AiBi,D2,{AiBi)D2}, 

T3 - {AiBi,DiD2,{AiBi){DiD2)}. 

Say Ai commutes with ri, Bi commutes with T2, 
and Ci commutes with T3. The operator BiCi has 
to commute with one of the triples ti, T2, or T3. 
This in turn leads to a set of four independent, 
commuting generators, which cannot exist in d = 8. 
For example, if BiCi commutes with the operators 
in Ti, Di commutes with Ai, AiBi, and BiCi, 
leading to a set of four independent operators, all 
of which commute. 

We have therefore shown that it is not possible to 
construct a maximal commuting class by picking 
one element each from fc = 7 such classes in d = 8. 

□ 



Appendix C: Tightness of H2 Uncertainty Relation 

Before we prove our result on the tightness of the 
entropic uncertainty relation (EUR), we introduce a 
parametrization of the MUB vectors obtained from com- 
muting classes of Paulis, which will prove useful in eval- 
uating the H2 entropy. 



1. Parameterizing MUB Vectors in Terms of 
Binary Strings 

Given a set of maximal commuting classes of Paulis in 
d = 4, let crp^ denote the jth element in the class Ci. 
The vectors of the basis Bi corresponding to the 

class Ci can be parametrized in terms of binary strings 
a = {ai, 02,0:3) as follows: 



a, e {0, 1}. 



(CI) 

Note that the states (6^"'' | arc guaranteed to be pure 
states, since they are Hermitian and for all i and a, we 
have 



Tr 



16 



-Tr[: 



1 = Tr 



(C2) 

Each basis B, = {l^f l^f 1^!''^), I&f ')} is thus 
parametrized by four 3-bit binary strings a, /? ,7, S which 
satisfy the following property. 



Lemma 13. The binary strings a, j3, 7, 5 
that parametrize the vectors of a basis Bi = 

are such that for any 
i = 1,2,3, the string ajf3j"fjSj has Hamming weight 2. 



Proof. For any two vectors a ^ (3 in the basis Bi 



Tr 



3 



= — Tr 
16 



i+E(-ir 



This implies that for a 7^ /3, the strings a and /3 can 
coincide in only one location, i.e., there is precisely one 
value of i for which /3i = 0. A more formal state- 
ment would be that the strings a and (3 have a Hamming 
distance of 2. The Hamming distance between two bi- 
nary strings of equal length is the number of positions at 
which the corresponding bits are different. 



Each basis Bi 



bf')} is thus 



parametrized by four 3-bit binary strings a, (3 ,7, S which 
are at a Hamming distance of 2 from each other. Ignor- 
ing the bit where two strings take on the same value, the 
remaining 2-bit strings must be at a Hamming distance 
of 2. Notice that for a given 2-bit string, there is a unique 
2-bit string that is at Hamming distance 2 from it. Thus, 
if tti ©/3i = for some i = 1,2,3, a, ©7, = would imply 
that the remaining two bits of 7 are the same as those of 
/3 making 7 = /?. 

For a given i therefore, © /3i = would imply that 
© 7i = tti (B Si = 1, so that the string Ui/SijiSi has 
exactly two O's and two I's. □ 



2. Tightness of EUR 

Now we are ready to prove the tightness of the EUR 
for the collision entropy for sets of 3 MUBs in d = 4. 

Theorem 14. Assume that we are given a set of i max- 
imal commuting classes {Ci,C2,C3} in dimension d = 4 
such that at least one maximal commuting class S can be 
constructed by picking one element from each ofCi, C2, 
and C3 . Then, the common eigenstates of the operators 
in S saturate the following uncertainty relation: 



» > 1, 



(C3) 



where Bi is the common eigenbasis of the operators in Ci . 
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Proof. Suppose {o'[^\ o'^\ cr^^ } form a commuting set. 
Then, the common eigenstates of such a set can again be 
denoted as 



(3) 



Recall that the collision entropy corresponding to mea- 
suring the state \tp) in basis Bi = x = a, (3,^,5} 
is given by 

2; — Q,/3,7,(5 

Expanding and in terms of the a operators 

as described above, we see that for a given choice of ba- 
sis i, only those coefficients in the expansion of \ip) that 
correspond to operators in Ci contribute to the collision 
entropy. Thus, for i ~ I, 



Since the string ai/3i7ii5i has exactly two O's and two 
I's, the expression [1 -|- (— l)^i®'=i] correspondingly takes 
on the values and 2. Since the former property holds 
for any string ai(3i"fiSi (for all i S [1,5]), the expression 
[1 -I- (— l)=^i©'=i] takes on the value half the time and 
the value 2 half the time, independent of the value of i. 
Therefore, for i = 1, . . . 5, 



i/2(S,||^)) = -log-[0 + 



□ 



H,iB,m = -log J2 (Tr[|&i^^)(&^^^ 



E (^Tr[l+(-l)-®-l] 



x—a.j3,j.S 



x—a.,(3.,'y,6 



